IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade librbd1-develUpgrade python-rbdUpgrade librados2Upgrade librbd1Upgrade ceph-commonUpgrade ceph-common-debuginfoUpgrade librados2-develUpgrade python-rados | Oct 23, 2023 | Oct 23, 2023 |
| Centos_linux | — | Upgrade ceph-fuse-debuginfoUpgrade ceph-commonUpgrade python3-radosUpgrade ceph-immutable-object-cache-debuginfoUpgrade libcephfs-develUpgrade rbd-fuse-debuginfoUpgrade libcephsqlite-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-immutable-object-cacheUpgrade python3-rados-debuginfoUpgrade librados-develUpgrade librgw2-debuginfoUpgrade python3-ceph-commonUpgrade librgw-develUpgrade rbd-nbd-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-debuginfoUpgrade librados-devel-debuginfoUpgrade libcephfs2Upgrade python3-rgwUpgrade libradosstriper1Upgrade ceph-test-debuginfoUpgrade librbd-develUpgrade ceph-fuseUpgrade cephfs-mirror-debuginfoUpgrade ceph-selinuxUpgrade cephadm-ansibleUpgrade ceph-baseUpgrade ceph-radosgw-debuginfoUpgrade libradosstriper1-debuginfoUpgrade libradospp-develUpgrade ceph-osd-debuginfoUpgrade ceph-mon-debuginfoUpgrade python3-rgw-debuginfoUpgrade python3-rbdUpgrade ceph-debugsourceUpgrade rbd-mirror-debuginfoUpgrade python3-ceph-argparseUpgrade librgw2Upgrade cephadmUpgrade rbd-nbdUpgrade python3-cephfs-debuginfoUpgrade cephfs-topUpgrade ceph-base-debuginfoUpgrade ceph-mds-debuginfoUpgrade python3-cephfsUpgrade ceph-mibUpgrade ceph-exporter-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-mgr-debuginfoUpgrade ceph-common-debuginfo | Nov 1, 2023 | Oct 12, 2023 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Oct 25, 2023 |
| Redhat_linux | — | Upgrade libcephfs2-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-osd-debuginfoUpgrade librados-devel-debuginfoUpgrade cephadmUpgrade ceph-radosgw-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-fuseUpgrade python3-ceph-commonUpgrade librbd-develUpgrade cephfs-mirror-debuginfoUpgrade rbd-mirror-debuginfoUpgrade cephfs-topUpgrade python3-cephfs-debuginfoUpgrade libradosstriper1Upgrade ceph-mgr-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-immutable-object-cacheUpgrade cephadm-ansibleUpgrade ceph-exporter-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-test-debuginfoUpgrade librgw2-debuginfoUpgrade librados-develUpgrade librgw-develUpgrade libcephfs-develUpgrade python3-cephfsUpgrade ceph-fuse-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-debugsourceUpgrade ceph-selinuxUpgrade python3-rados-debuginfoUpgrade ceph-baseUpgrade python3-rbdUpgrade librgw2Upgrade libcephsqlite-debuginfoUpgrade rbd-nbdUpgrade libcephfs2Upgrade python3-radosUpgrade rbd-nbd-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-commonUpgrade libradospp-develUpgrade python3-rgw-debuginfoUpgrade ceph-resource-agentsUpgrade python3-rgwUpgrade ceph-mibUpgrade ceph-debuginfo | Nov 1, 2023 | Oct 12, 2023 |
| Ubuntu | — | Upgrade cephUpgrade ceph-baseUpgrade ceph-common (Ubuntu Pro)Upgrade ceph (Ubuntu Pro)Upgrade ceph-commonUpgrade ceph-base (Ubuntu Pro) | Jan 30, 2024 | Jan 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub